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DETAILED ACTION 

1. Examiner initiated telephone interview was held on May 15, 2009 with Applicant's 
representative, Lawrence E. Russ, to include dependent claim to the base claims to avoid double 
patenting and particularly point out the applicant's invention, to solve 101 problems, to cancel 
claims and to correct fig. 21 ST56. The Applicant's representative authorized the Examiner on 
May 22, 2009 to amend the claims by Examiner's amendment to include claim 21 to base claims 
1 and 13, cancel claims 2-12 and 19-22, agreed with the examiner's proposed amendment to 
comply with Bilski (101) as shown below, and agreed with the examiner to correct fig. 21 ST56 
by deleting "encrypt" and replace it with "decrypt". The applicant preferred to submit the 
correction to the drawing incompliance with the allowance office action. 



Response to Amendment 

2. In response to communications filed on 03/04/2009 claims 1-22 were pending. Claims 2- 
12, and 19-22 are currently cancelled and claims 1 and 13-18 are currently pending as allowed. 

3. The objection to the disclosure for lack of support to claims 12 and 20 is withdrawn in 
view of applicant's disclosure. 

4. The objection to the disclosure for lack of support to claims 1-4, 6, 7, 12, 13, and 15-22 is 
withdrawn in view of applicant's disclosure. 

5. The objection to the disclosure for lack of support to claims 1-3, 11-13, and 19-22 is 
withdrawn in view of applicant's disclosure. 

6. The objection to claims 16, 21, and 22 is withdrawn in view of applicant's amendment. 
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7. The rejection to claims 1-4, 6-8, and 10-22 is withdrawn in view of applicant's 
amendment. 

8. The rejection to claims 18 and 22 is withdrawn in view of applicant's amendment. 

9. The 101 rejection to claims 2 and 19 is withdrawn, claims 2 and 19 are currently 
cancelled. 

Response to Arguments 

10. Applicants arguments submitted on 03/04/2009 are fully considered and are persuasive. 

Drawings 

1 1 . The following changes to the drawings have been approved by the examiner and agreed 
upon by applicant: please replace fig. 21 "encrypt" with "decrypt" on fig. 21 ST56. In order to 
avoid abandonment of the application, applicant must make these above agreed upon drawing 
changes. 

Applicant is required to submit acceptable corrected drawings within the time period set 
in the Office action. See 37 CFR 1.85(a). Failure to take corrective action within the set 
period will result in ABANDONMENT of the application. 

If corrected drawings are required in a Notice of Allowability (PTOL-37), the new 
drawings MUST be filed within the THREE MONTH shortened statutory period set for 
reply in the "Notice of Allowability. "Extensions of time may NOT be obtained under the 
provisions of 37 CFR 1.136 for filing the corrected drawings after the mailing of a Notice 
of Allowability. 



EXAMINER >S AMENDMENT 

12. An examiner's amendment to the record appears below. Should the changes and/or 
additions be unacceptable to applicant, an amendment may be filed as provided by 37 CFR 
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1.312. To ensure consideration of such an amendment, it MUST be submitted no later than the 
payment of the issue fee. 

Authorization for this examiner's amendment was given in a telephone interview with 
Applicant's representative, Lawrence E. Russ on May 22, 2009. 

The claims are amended as follows: 

Claims 1 and 13 are amended and claims 2-22 and 19-22 are canceled. 

1. (currently amended) A data processing method performed by a device to be 
authenticated and an authenticating device, the device to be authenticated holding first 
authentication use data generated by encryption using key data, and the authenticating device 
holding the key data, the method comprising: 

generating a first random value at the device to be authenticated; 
encrypting the first random value at the device to be authenticated using a first 
encryption process and the first authentication use data; 

providing key designation data designating the key data and the encrypted first 
random value from the device to be authenticated to the authenticating device; 

obtaining the key data at the authenticating device using the key designation data; 
performing encryption at the authenticating device using the key data to generate 
second authentication use data; 
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decrypting the encrypted first random value at the authenticating device using the 
first encryption process and the second authentication use data to obtain the first random 
value; 

encrypting the first random value at the authenticating device using a second 
encryption process and the second authentication use data to generate a further encrypted 
value; 

providing the further encrypted value from the authenticating device to the device 
to be authenticated; 

decrypting the further encrypted value at the device to be authenticated using the 
second encryption process and the first authentication use data; 

comparing the decrypted further encrypted value with the first random value at 

I Deleted 

the device to be authenticated; an^ 

executing processing related to the key data in the authenticating device in 
response to the comparing step determining that the decrypted further encrypted value 
and the first random value are the same thereby indicating that the first authentication use 
data and the second authentication use data are the same; 

generating a second random value at the authenticating device; 

encrypting the second random value at the authenticating device using a second 
encryption process and the second authentication use data; 

providing the encrypted second random value from the authenticating device to 
the device to be authenticated; 
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decrypting the encrypted second random value at the device to be authenticated 
using the second encryption process and the first authentication use data to obtain the 
second random value; 

encrypting the second random value at the device to be authenticated using the 
first encryption process and the first authentication use data to generate a still further 
encrypted value; 

providing the still further encrypted value from the device to be authenticated to 
the authenticating device; 

decrypting the still further encrypted value at the authenticating device using the 
first encryption process and the second authentication use data; and 

comparing the decrypted still further encrypted value with the first random value 
at the authenticating device; 

the executing step executing the processing related to the key data in the 
authenticating device in response to the comparing step at the authenticating device 
determining that the decrypted still further encrypted value and the first random value are 
the same thereby indicating that the first authentication use data and the second 
authentication use data are the same, 

wherein the device to be authenticated is a management device, and the 
authenticating device is a secure authentication module having a central processing unit. 

2. (Cancelled) 

3. (Cancelled) 
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4. (Cancelled) 

5. (Cancelled) 

6. (Cancelled) 

7. (Cancelled) 

8. (Cancelled) 

9. (Cancelled) 

10. (Cancelled) 

11. (Cancelled) 

12. (Cancelled) 
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13. (currently amended) A data processing method performed by a device to be 
authenticated, the device to be authenticated holding first authentication use data generated by 
encryption using key data, an authenticating device holding the key data, the method comprising: 
generating a first random value; 

encrypting the first random value using a first encryption process and the first 
authentication use data; 

providing key designation data designating the key data and the encrypted first 
random value to the authenticating device, the authenticating device obtaining the key 
data using the designated key data, performing encryption using the key data to generate 
second authentication use data, decrypting the encrypted first random value using the first 
encryption process and the second authentication use data to obtain the first random 
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value, and encrypting the first random value using a second encryption process and the 
second authentication use data to generate a further encrypted value; 

receiving the further encrypted value from the authenticating device; 

decrypting the further encrypted value using the second encryption process and 
the first authentication use data; 

comparing the decrypted further encrypted value with the first random value; aeet 

causing the authenticating device to execute processing related to the key data in 
response to the comparing step determining that the decrypted further encrypted value 
and the first random value are the same thereby indicating that the first authentication use 
data and the second authentication use data are the same; 

generating a second random value at the authenticating device; 

encrypting the second random value at the authenticating device using a second 
encryption process and the second authentication use data; 

providing the encrypted second random value from the authenticating device to 
the device to be authenticated; 

decrypting the encrypted second random value at the device to be authenticated 
using the second encryption process and the first authentication use data to obtain the 
second random value; 

encrypting the second random value a the device to be authenticated using the 
first encryption process and the first authentication use data to generate a still further 
encrypted value; 
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providing the still further encrypted value from the device to be authenticated to 
the authenticating device; 

decrypting the still further encrypted value at thee authenticating device using the 
first encryption process and the second authentication use data; and 

comparing the decrypted still further encrypted value with the first random value 
at the authenticating device; 

the executing step executing the processing related to the key data in the 
authenticating device in response to the comparing step a the authenticating device 
determining that the decrypted still further encrypted value and the first random value are 
the same thereby indicating that the first authentication use data and the second 
authentication use data are same, 

wherein the device to be authenticated is a management device, and the 
authenticating device is a secure authentication module having a central processing unit. 

19. (Cancelled) 

20. (Cancelled) 

21. (Cancelled) 

22. (Cancelled) 

Allowable Subject Matter 

13. Claims 1 and 13-18 are allowed. 
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14. Any comments considered necessary by applicant must be submitted no later than the 
payment of the issue fee and, to avoid processing delays, should preferably accompany the issue 
fee. Such submissions should be clearly labeled "Comments on Statement of Reasons for 
Allowance." 

Conclusion 

15. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to ELENI A. SHIFERAW whose telephone number is (571)272- 
3867. The examiner can normally be reached on Mon-Fri 8:00am-5:00pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Nasser R. Moazzami can be reached on (571) 272-4195. The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you would 
like assistance from a USPTO Customer Service Representative or access to the automated 
information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 
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